Added OCP 3.7 Release Notes by ahardin-rh · Pull Request #6008 · openshift/openshift-docs

ahardin-rh · 2017-10-27T20:17:38Z

Preview Build: http://file.rdu.redhat.com/~ahardin/11142017/ocp-3-7-release-notes/release_notes/ocp_3_7_release_notes.html

jhou1 · 2017-11-15T06:58:36Z

+applications at scale. This is due to the introduction of brick-multiplexing
+support in GlusterFS.
+
+Over 1,000 volumes in a 3-node cluster with 32 GB per node available to


32 GB per node -> 32 GB RAM per node?

jhou1 · 2017-11-15T06:59:07Z

+
+Over 1,000 volumes in a 3-node cluster with 32 GB per node available to
+GlusterFS has been successfully tested. Also, 300 Block PVs are supported now on
+3-node CNS .


CNS . -> CNS.

jhou1 · 2017-11-15T07:00:46Z

+==== CNS Multi-protocol (File, Block, and S3) Support for OpenShift
+
+Container-native storage (CNS) is now extended support iSCSI and S3 back end for
+{product-title}. Heketi is enhanced to support persistent volume (PV) expansion,


The PV resize feature will land in 3.8.

wkshi · 2017-11-15T07:10:24Z

+that can be run and output can be sent as file-based output.
+
+----
+$ ansible-playbook playbooks/byo/openshift-checks/adhoc.yml


Known issue: https://bugzilla.redhat.com/show_bug.cgi?id=1509157

qinpingli · 2017-11-15T07:24:29Z

+
+.Namespece-specific Example
+----
+piVersion: v1


apiVersion?

qinpingli · 2017-11-15T07:34:01Z

+Alternatively, they can use an external provisioner and feed it the node
+configuration via `configMaps`.
+
+Example persistent volume named `example-local-pv` that some tenant can now claim:


some tenants?

wkshi · 2017-11-15T07:36:53Z

Are we still encourage customers use quick installer in 3.7?
QE has identified that quick installer is totally unable to perform fresh installation in 3.7

Know issues:
https://bugzilla.redhat.com/show_bug.cgi?id=1509112
https://bugzilla.redhat.com/show_bug.cgi?id=1509137

qinpingli · 2017-11-15T07:39:15Z

+----
+$ oc create -f snapshot.yaml
+
+apiVersion: volume-snapshot-data.external-storage.k8s.io/v1


apiVersion: volumesnapshot.external-storage.k8s.io/v1

jiajliu · 2017-11-15T07:45:37Z

some errors about etcd data directory.
1.1 [Downgrading OpenShift]-[Verifying Backups]
Error: "/var/lib/origin/etcd-backup-"
Shouldbe: /var/lib/etcd/openshift-backup-
1.2 [Backup and Restore]-[Prerequisites], [Embedded etcd]
Error: embedded etcd's dir is not consistant between [Prerequisites] and [Embedded etcd]

all-in-one cluster
/var/lib/origin/openshift.local.etcd
external etcd (not on master)
/var/lib/etcd
embedded etcd (on master)
/var/lib/etcd

"# ETCD_DIR=/var/lib/origin/openshift.local.etcd"

Shouldbe: From v3.7 there is no embedded etcd now. If older version is embedded etcd, user need to migrate embedded etcd to external etcd first. And we still support two deployed external etcd (etcd on master & etcd not on master).

quick installer can not be used when upgrade to v3.7 because a know issues[1], so [Using the Installer to Upgrade] section seems not needed. And in [Preparing for an Automated Upgrade] section, "yum update openshift-ansible" is a must instead of atomic-openshift-utils

[1]https://bugzilla.redhat.com/show_bug.cgi?id=1496372

release notes, section [OpenShift Container Platform 3.7 Release Notes]-[INCREASED CONTROL OVER IMAGE STREAM AND TEMPLATES], RPM and Container's directory should be changed with each other.

RPM = /etc/origin/examples /etc/origin/hosted
Container = /usr/share/openshift/examples /usr/share/openshift/hosted

wanghaoran1988 · 2017-11-15T08:01:18Z

+defined in a role.
+
+[[ocp-37-flexvolume-support-for-non-stotage-use-cases]]
+==== Official FlexVolune Support for Non-storage Use Cases


This is more like a storage feature, but for the security part, maybe we can write something about "SCC now support flexVolume" that we did in this card: https://trello.com/c/YT6sNEay/61-5-scc-flex-volume-support-sccfsi37

BTW, typo in "FlexVloune"

bmeng · 2017-11-15T08:07:51Z

+traffic to allow. The annotation is as follows:
+
+----
+$ oc annotate namespace ${ns} 'net.beta.kubernetes.io/network-policy={"ingress":{"isolation":"DefaultDeny"}}'


The annotation is not needed now when we are using the v1 api.

duyanyan · 2017-11-15T08:58:12Z

+Example:
+
+----
+clusterNetworkCIDR: 10.1.0.0/24, 10.1.5.0/24, 10.2.1.0/24 …


The example should be like this:

networkConfig: clusterNetworkCIDR: 10.128.0.0/24 clusterNetworks: - cidr: 11.128.0.0/24 hostSubnetLength: 6 - cidr: 12.128.0.0/24 hostSubnetLength: 6 - cidr: 13.128.0.0/24 hostSubnetLength: 4 externalIPNetworkCIDRs: - 0.0.0.0/0 hostSubnetLength: 6

duyanyan · 2017-11-15T09:02:09Z

+There are multiple comma-delimited CIDRs in the configuration file. Each node is
+allocated only a single subnet from within any of the available ranges. You can
+not allocate different-sized host subnets, or use this to change the host subnet
+size The `clusterNetworkCIDRs` can be different sizes, but must be equal to or


Nodes could allocate different-sized subnets by setting different hostSubnetLength
Lack of period between size The

duyanyan · 2017-11-15T09:07:42Z

+allocated only a single subnet from within any of the available ranges. You can
+not allocate different-sized host subnets, or use this to change the host subnet
+size The `clusterNetworkCIDRs` can be different sizes, but must be equal to or
+larger than the host subnet size It is not allowed to have some nodes use


Lack of period between size It is

liangxia · 2017-11-15T09:55:26Z

+their current application.
+
+An external provisioner is used to access the EBS, GCE pDisk, HostPath, and
+Cinder snapshotting API. This Technology Preview feature has tested EBS and


As far as I can see, Cinder is not supported at the moment. https://trello.com/c/owCRnP8I/521-13-snapshot-implement-the-out-of-tree-snapshotting-controller

@xltian what test cases do we have in this area?

liangxia · 2017-11-15T09:56:37Z

+----
+$ oc create -f snapshot.yaml
+
+apiVersion: volume-snapshot-data.external-storage.k8s.io/v1


The apiVersion has changed to "volumesnapshot.external-storage.k8s.io/v1"

liangxia · 2017-11-15T10:00:09Z

+The `generatedeploymentconfig` API endpoint is now removed
+
+[discrete]
+[[deprecating-some-plicy-related-apis]]


"plicy", typo here.

bparees · 2017-11-15T14:58:57Z

+data centers, enabling organizations to implement a private PaaS that meets
+security, privacy, compliance, and governance requirements.
+
+[[ocp-36-about-this-release]]


bparees · 2017-11-15T14:59:11Z

+xref:../install_config/index.adoc#install-config-index[Installation and
+Configuration] documentation.
+
+[[ocp-36-new-features-and-enhancements]]


bparees · 2017-11-15T15:00:39Z

+CRI-O v1.0 (currently in xref:ocp-37-technology-preview[Technology Preview]) is a
+lightweight, native Kubernetes container runtime interface. By design, it
+provides only the runtime capabilities needed by the kublet. CRI-O is designed
+to be part of Kubernetes and evolve in lock-step with the platform.


@runcom @mrunalp we need some warning here that using CRIO w/ builds will not work right?

Right, your PR haven't made 3.7

bparees · 2017-11-15T15:01:54Z

+clusterNetworkCIDR: 10.1.0.0/24, 10.1.5.0/24, 10.2.1.0/24 …
+----
+
+[[ocp-37-routes-alloed-to-set-cookie-names-for-session-stickiness]]


alloed->allowed?

bparees · 2017-11-15T15:04:45Z

+
+* To set parameters, create a secret with values.
+* Create a `TemplateInstance` containing the whole template you want to
+instantiate, and a reference to the secret created above.


this references "the secret created above" but there are no instructions for creating the secret. Anyway we have official docs for this, can we just point there instead of duplicating it here?
https://docs.openshift.org/latest/rest_api/examples.html#template-instantiation

bparees · 2017-11-15T15:06:04Z

+{product-title} now includes needed Prometheus monitoring and alerting. Expose
+build step timings (time to pull images, fetch sources, run assemble, commit
+images, push images). Expose failure reasons (for example, see that builds are
+consistently failing due to failure to fetch source).


the build step timings are not exposed as prometheus metrics. So this is two things:

prometheus metrics that show you the health of builds in the system (number running, failing, failure reasons, etc)

timing information on build objects themselves to show how long they spent in various steps (not exposed as prometheus metrics)

bparees · 2017-11-15T15:08:51Z

+break down an entire configuration map or secret into environment variables without
+explicitly setting `env name` to  `key mappings`.
+
+[[ocp-36-notable-technical-changes]]


-37- (probably need to grep the whole file for these)

liangxia · 2017-11-17T05:51:16Z

+==== Official FlexVolune Support for Non-storage Use Cases
+
+There is now a supported interface to allow you to bind and mount in content
+from a running pod. FlexVolume is a script interface that runs on the kublet and


Typo of kubelet.

liangxia · 2017-11-17T05:58:37Z

+xref:../admin_guide/managing_networking.adoc#admin-guide-manage-networking[Managing
+Networking] for more information.
+
+[[ocp-27-cluster-ip-range-more-flexible]]


liangxia · 2017-11-17T06:10:04Z

+Me Again* per quota type. Administrators can create custom messages to the quota
+warning.
+
+[[ocp-47-environment-variable-editor-added-to-stateful-sets-page]]


liangxia · 2017-11-17T06:10:47Z

+[[ocp-37-installation]]
+=== Installation
+
+[[ocp-37-migrate-etcd-before-upgarde]]


Typo of upgrade

liangxia · 2017-11-17T06:13:34Z

+=== Metrics and Logging
+
+[[ocp-37-journald-system-logs]]
+==== Jouranld for System Logs and JSON File for Container Logs


Typo of Journald.

liangxia · 2017-11-17T06:17:07Z

+on OpenShift] for more information.
+
+[[ocp-37-integrated-approach-to-adding-hosa]]
+==== Integrated Approach to Adding Hawkular OpenShift Agent (Techology Preview)


Typo of Technology.

liangxia · 2017-11-17T06:26:15Z

+consisting of:
+
+* a simple directory structure with named action playbooks.
+* metadata (required and optional parameters, as well asdependencies).


Missing space between "asdependencies"

liangxia · 2017-11-17T06:28:03Z

+manually using standardized container creation tooling, or with APB tooling that
+Red Hat will deliver, which provides a guided approach to creation.
+
+[[ocp-37-iopenshift-template-broker]]


Extra 'i' before openshift

liangxia · 2017-11-17T06:28:48Z

+
+image::3.7-bind-mongodb-nodejs-at-creation.gif[connect a service]
+
+[[ocp-37-include-templates-from-oter-projects]]


Typo of other.

liangxia · 2017-11-17T06:30:17Z

+{product-title} 3.7 introduces the following notable technical changes.
+
+[discrete]
+[[ocpapi-connectivity-variables-now-deprecated]]


Missing '-' between "ocapi"

liangxia · 2017-11-17T06:31:11Z

+than the published OpenShift API service endpoints. To connect to the OpenShift
+API in these contexts, use
+xref:../dev_guide/service_accounts.adoc#dev-guide-service-accounts[service DNS]
+or the automatically exposed `KUBERENTES`


Typo of KUBERNETES.

taneem-ibrahim · 2017-11-22T17:14:35Z

Hello, is encrypting_data section supposed to say "This is an alpha feature and may change in future" in 3.7 (it was mentioned as alpha in 3.6 as well)?

juzhao · 2017-11-23T00:45:28Z

+
+Docker log driver is set to `json-fiile` as the default for all nodes. Docker
+`log-driver` can be set to `journal`, but there is no log rate throttling with
+journal driver. So, there is always a risk for denial-of-service attacks from


journal -> journald

adellape · 2017-11-29T01:30:50Z

🔥 🔥 🔥 🔥 🔥 🔥 🔥

anpingli · 2017-11-29T02:54:57Z

@adellape the default logger driver is Journald in v3.7. https://bugzilla.redhat.com/show_bug.cgi?id=1513409.

juzhao · 2017-11-29T03:09:02Z

+==== Jourald for System Logs and JSON File for Container Logs
+
+Docker log driver is set to `json-file` as the default for all nodes. Docker
+`log-driver` can be set to `journal`, but there is no log rate throttling with


journal -> journald

@juzhao Thanks, fixed in #6556

ahardin-rh added this to the Future Release milestone Oct 27, 2017

ahardin-rh added the branch/enterprise-3.7 label Oct 27, 2017

ahardin-rh self-assigned this Oct 27, 2017

ahardin-rh force-pushed the ocp-3-7-release-notes branch from f530799 to a4b2ee7 Compare October 27, 2017 20:19

ahardin-rh changed the title ~~Added OCP 3.7 Release Notes~~ [WIP}Added OCP 3.7 Release Notes Oct 27, 2017

ahardin-rh changed the title ~~[WIP}Added OCP 3.7 Release Notes~~ [WIP]Added OCP 3.7 Release Notes Oct 27, 2017

ahardin-rh force-pushed the ocp-3-7-release-notes branch from a4b2ee7 to 748599a Compare October 27, 2017 21:08

ahardin-rh force-pushed the ocp-3-7-release-notes branch 7 times, most recently from 96d3634 to 13677bf Compare November 14, 2017 20:27

jhou1 reviewed Nov 15, 2017

View reviewed changes

wkshi reviewed Nov 15, 2017

View reviewed changes

qinpingli reviewed Nov 15, 2017

View reviewed changes

wanghaoran1988 reviewed Nov 15, 2017

View reviewed changes

bmeng reviewed Nov 15, 2017

View reviewed changes

duyanyan reviewed Nov 15, 2017

View reviewed changes

liangxia reviewed Nov 15, 2017

View reviewed changes

bparees requested changes Nov 15, 2017

View reviewed changes

liangxia reviewed Nov 17, 2017

View reviewed changes

juzhao reviewed Nov 23, 2017

View reviewed changes

ahardin-rh force-pushed the ocp-3-7-release-notes branch from 13677bf to a1b3d34 Compare November 27, 2017 17:45

openshift-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Nov 27, 2017

ahardin-rh force-pushed the ocp-3-7-release-notes branch 4 times, most recently from a6e0124 to d0effbb Compare November 27, 2017 23:43

ahardin-rh changed the title ~~[WIP]Added OCP 3.7 Release Notes~~ Added OCP 3.7 Release Notes Nov 28, 2017

ahardin-rh force-pushed the ocp-3-7-release-notes branch from d0effbb to 08d40a6 Compare November 29, 2017 01:12

ahardin-rh merged commit 76761a0 into openshift:master Nov 29, 2017

Added OCP 3.7 Release Notes

08d40a6

ahardin-rh mentioned this pull request Nov 29, 2017

[enterprise-3.7]Added OCP 3.7 Release Notes #6521

Merged

juzhao reviewed Nov 29, 2017

View reviewed changes

vikram-redhat modified the milestones: Future Release, OCP 3.7 GA Nov 29, 2017

gaurav-nelson mentioned this pull request Feb 27, 2018

Recreated advanced_install.adoc from history #7953

Closed


		image::3.7-bind-mongodb-nodejs-at-creation.gif[connect a service]

		[[ocp-37-include-templates-from-oter-projects]]

Conversation

ahardin-rh commented Oct 27, 2017 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

wkshi commented Nov 15, 2017

Uh oh!

Choose a reason for hiding this comment

Uh oh!

jiajliu commented Nov 15, 2017 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

bmeng Nov 15, 2017 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

ahardin-rh commented Oct 27, 2017 •

edited

Loading

jiajliu commented Nov 15, 2017 •

edited

Loading

bmeng Nov 15, 2017 •

edited

Loading